Desinstallation right surf

Résolu
Bonjour,
je souhaite désinstaller right surf de mon ordinateur svp
j ai suivi la procédure du site malekal.com dont voici les liens des 2 rapports

https://pjjoint.malekal.com/files.php?id=20140204_r11n7y5p9q12
https://pjjoint.malekal.com/files.php?id=20140204_s13d8c9p158

d avance merci de m'aider à désinstaller ce virus
:)

8 réponses

  1. BONJOUR
    merci pour votre aide j ai effectué la manipulation demandé

    je vous joint le rapport Merci

    All processes killed
    ========== OTL ==========
    Registry value HKEY_USERS\S-1-5-21-2219473226-3065652129-3038185199-1001\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive deleted successfully.
    C:\Users\STAN\AppData\Roaming\newnext.me folder moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Public

    User: STAN
    ->Temp folder emptied: 53320574 bytes
    ->Temporary Internet Files folder emptied: 86664465 bytes
    ->Java cache emptied: 1 bytes
    ->Google Chrome cache emptied: 0 bytes
    ->Flash cache emptied: 1576 bytes

    User: UpdatusUser
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 41620 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 1901275 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 86841 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85828 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 136,00 mb

    [EMPTYFLASH]

    User: All Users

    User: Default
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Public

    User: STAN
    ->Flash cache emptied: 0 bytes

    User: UpdatusUser
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0,00 mb

    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully

    OTL by OldTimer - Version 3.2.69.0 log created on 02042014_182647

    Files\Folders moved on Reboot...
    C:\Users\STAN\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRLQ9C35\likebox[1].htm moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D109FDOB\affich-29641772-desinstallation-right-surf[1].htm moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\b9QBgL0iMZfDSpmcXcE8nJTpJ4fOLLwmHp8vl0kIMg4[1].eot moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\follow_button.1387492107[1].htm moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\Zd2E9abXLFGSr9G3YK2MsG8ITcfo9NwJpvZiO7_FxEg[1].eot moved successfully.
    C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
    File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
    File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...
    1. Modérateur
      Relance OTL.
      o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
      Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

      :OTL
      O4 - HKU\S-1-5-21-2219473226-3065652129-3038185199-1001..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\STAN\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l File not found
      [2014/02/04 11:49:17 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming\newnext.me
      :commands
      [emptytemp]
      [emptyflash]
      [resethosts]
      [reboot]

      * poste le rapport ici

      1. Modérateur
        regarde si rightsurf ne se désinstalle pas depuis programmes et fonctionnalités du panneau de configuration.

        Relance OTL.
        o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
        Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

        :OTL
        SRV - [2014/02/01 10:46:02 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe -- (Util RightSurf)
        SRV - [2014/01/29 23:13:48 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\updateRightSurf.exe -- (Update RightSurf)
        DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
        O2 - BHO: (RightSurf) - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} - C:\Program Files (x86)\RightSurf\RightSurfbho.dll File not found
        [2014/01/31 23:34:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RightSurf
        [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming\newnext.me
        [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\genienext
        [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\Documents\Mobogenie
        [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\Mobogenie
        [2014/01/07 21:59:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Jump Flip
        :Commands
        [reboot]

        * poste le rapport ici

        1. bonjour

          Merci pour votre aide oui j ai déjà utilisé adw cleaner et effectué un nettoyage complet avant OTL le dossier rightsurf étais toujours présent après le nettoyage de adw
          1. Modérateur
            Salut,

            je regarde, tu as utilisé AdwCleaner ?